[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

E?LTS report



I've worked during august on the below listed packages, for Freexian
LTS/ELTS [1]

Many thanks to Freexian and our sponsors [2] for providing this opportunity!

ca-certificates
--------------------
I released ELA-1803-1 ca-certificates CA certificates update, upgrading the CA certificates to bookworm release
I also released DLA 4726-1 ca-certificates CA certificate update for bullseye

bind
------

I release ELA-1802-1 bind9 security update this fix 
CVE-2023-4408 CVE-2025-8677 CVE-2025-40778 CVE-2026-1519 CVE-2026-3039 CVE-2026-3592 CVE-2026-5946 CVE-2026-5950 CVE-2026-10723 CVE-2026-11622 CVE-2026-11721 CVE-2026-13204 CVE-2026-13321

All remaining important opened CVEs were fixed

To deliver the security fixes, several archive packages needed updates. The packages isc‑dhcp, libnss‑lwres, milter‑greylist, and bind‑dyndb‑ldap were rebuilt for stretch.
 Additionally, to maintain strictly increasing version numbers and ensure a smooth upgrade path, libnss‑lwres and milter‑greylist were also rebuilt for buster.

nodejs
----------

I am preparing a DSA for nodejs and triagging all supporting distribution.

apr-util (apache)
----

I released DLA 4742-1 fixing some apr-util security update ( CVE-2025-49506 CVE-2026-32327 CVE-2026-34191 CVE-2026-34501 CVE-2026-34502)

imagemagick
--------------------

I was working on stretch release fixing last CVE


Various
-----------

I have attented monthly meeting

Cheers

rouca

[1]  https://www.freexian.com/lts/
[2]  https://www.freexian.com/lts/debian/#sponsors

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: